Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer
File: o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer (raw, json)
Hash identifier: l9nNZXGhP/QQPVo0c7zOWQ6sDOeJcpth4m/e1AR7FLk=
Subject key identifier: A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EBD8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 16 Apr 2024 18:25:30 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 141767
IP: 103.163.182.0/23
IP: 2001:df6:2380::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125912 (0x1ebd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 16 18:25:30 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91A36A7/serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5e:eb:b9:ea:f4:fb:24:e1:5c:13:62:0d:a7:
7a:33:b1:e4:11:2e:88:9b:d7:a3:79:c7:ba:21:0a:
53:ca:33:c7:96:79:41:a7:69:24:8a:96:3b:f8:ff:
44:27:df:a7:d1:65:5c:85:0a:2f:62:31:8f:2a:64:
f7:b8:12:f6:92:01:b4:a6:20:9c:22:05:e6:97:07:
c1:c6:ce:b2:3c:8d:21:48:3d:cf:12:48:2f:7b:83:
1f:46:b9:78:49:2d:1b:34:4e:6d:33:72:0d:09:63:
ea:5c:86:71:7c:a8:2a:e7:d2:10:6a:79:44:dd:92:
8a:b5:13:70:b6:c3:5d:b3:34:ed:dd:1d:44:05:91:
f1:25:57:11:82:15:70:e8:bf:3c:fb:86:00:56:70:
8a:9c:a5:bc:1b:2d:8c:08:a0:e2:e0:85:48:b1:aa:
aa:03:8e:2f:c6:d3:8a:35:a1:ae:28:1c:bf:1a:16:
75:4d:26:fe:b0:bb:9e:46:ed:b7:a0:eb:6b:25:96:
36:55:71:c8:ad:82:af:49:d9:b3:08:53:1d:2e:13:
a9:53:41:15:0f:e6:5d:43:5c:03:f3:f4:ca:de:0b:
8d:2c:15:39:ac:29:1e:08:19:f1:98:e9:b0:65:40:
bf:26:79:60:38:d7:33:d1:22:0d:21:1b:30:e3:ed:
c2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141767
sbgp-ipAddrBlock: critical
IPv4:
103.163.182.0/23
IPv6:
2001:df6:2380::/48
Signature Algorithm: sha256WithRSAEncryption
b8:4a:89:b2:90:cd:26:f1:84:ae:d1:00:e8:32:71:0e:f0:a2:
53:78:3f:17:7b:7b:78:b0:fb:e1:22:70:d9:36:13:c5:43:16:
55:d9:2c:b5:87:dc:bc:d3:73:e3:bc:d7:d6:6c:75:4f:00:9e:
d6:9e:c4:b7:0b:3b:f1:dc:cb:5c:a7:ae:e4:0a:90:dd:11:90:
6f:12:c6:81:3a:38:0e:72:fe:34:08:29:88:6b:87:01:b4:76:
3a:ff:6f:7c:7e:f7:6d:f4:0c:9b:27:98:b7:27:42:e2:d4:19:
21:14:b1:8b:93:b0:c1:91:12:26:8a:7a:56:9a:75:cd:45:96:
a5:d3:1e:be:b2:5d:36:31:a4:69:15:de:ce:26:e2:11:2a:79:
c3:c3:4b:10:e1:f1:db:4c:1c:01:2d:9f:b6:54:b4:95:25:cf:
c4:04:03:c1:d5:ae:85:7e:e9:2e:a4:3f:e8:32:81:ed:44:ad:
22:02:33:75:ef:67:fe:bc:03:6e:26:f3:e3:1a:a3:22:36:aa:
e5:00:04:b1:92:a5:ff:86:17:5e:01:4c:cc:d1:ba:4a:57:fe:
db:4d:8f:99:89:4e:56:57:b3:dd:7b:39:ab:5f:0b:3f:2c:10:
97:70:6d:e2:6a:52:68:b5:11:ea:b7:92:aa:7c:32:ae:39:d9:
19:e0:fe:d7
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAevYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDQxNjE4MjUzMFoXDTI1MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQTM2QTcxMTAvBgNVBAUTKEEzNjUyRDlFNTRFOTY0NjhCMjMwNDc5
MzczMTdGQTRFQ0Q3QjM2NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDRXuu56vT7JOFcE2INp3ozseQRLoib16N5x7ohClPKM8eWeUGnaSSKljv4/0Qn
36fRZVyFCi9iMY8qZPe4EvaSAbSmIJwiBeaXB8HGzrI8jSFIPc8SSC97gx9GuXhJ
LRs0Tm0zcg0JY+pchnF8qCrn0hBqeUTdkoq1E3C2w12zNO3dHUQFkfElVxGCFXDo
vzz7hgBWcIqcpbwbLYwIoOLghUixqqoDji/G04o1oa4oHL8aFnVNJv6wu55G7beg
62slljZVccitgq9J2bMIUx0uE6lTQRUP5l1DXAPz9MreC40sFTmsKR4IGfGY6bBl
QL8meWA41zPRIg0hGzDj7cIpAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUo2UtnlTp
ZGiyMEeTcxf6Ts17NkgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUEzNkE3LzhBQTY1QUZDQjk0OTExRUJCQkIzMjU1QUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBMzZBNy84QUE2NUFGQ0I5NDkxMUVCQkJCMzI1NUFDNEY5QUUwMi9vMlV0bmxU
cFpHaXlNRWVUY3hmNlRzMTdOa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAinHMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ6O2MA8EAgAC
MAkDBwAgAQ32I4AwDQYJKoZIhvcNAQELBQADggEBALhKibKQzSbxhK7RAOgycQ7w
olN4Pxd7e3iw++EicNk2E8VDFlXZLLWH3LzTc+O819ZsdU8AntaexLcLO/Hcy1yn
ruQKkN0RkG8SxoE6OA5y/jQIKYhrhwG0djr/b3x+9230DJsnmLcnQuLUGSEUsYuT
sMGREiaKelaadc1FlqXTHr6yXTYxpGkV3s4m4hEqecPDSxDh8dtMHAEtn7ZUtJUl
z8QEA8HVroV+6S6kP+gyge1ErSICM3XvZ/68A24m8+MaoyI2quUABLGSpf+GF14B
TMzRukpX/ttNj5mJTlZXs917OatfCz8sEJdwbeJqUmi1Eeq3kqp8Mq452Rng/tc=
-----END CERTIFICATE-----
Generated at Wed May 8 21:04:55 2024 by rpki-client on console-fra.rpki-client.org